Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Simonc6372

#46939of 53,632
5.4Total CVSS
Vulnerabilities · 1
PT-2020-13535
5.4
2020-05-24
Grafana · Grafana Piechart-Panel Plugin · CVE-2020-13429
**Name of the Vulnerable Software and Affected Versions** Grafana piechart-panel plugin versions prior to 1.5.0 **Description** The issue allows for XSS via the `Values Header` option, also known as the legend header. This is a security concern as it can lead to malicious script execution. **Recommendations** For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `Values Header` option in the piechart-panel plugin to minimize the risk of exploitation.